CVE-2020-25461 – Invalid Memory Access in the fxProxyGetter function in moddable/xs/source

4 years ago

Invalid Memory Access in the fxProxyGetter function in moddable/xs/sources/xsProxy.c in Moddable SDK before OS200908 causes a denial of service (SEGV).

Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25461

Reference (s):

https://github.com/Moddable-OpenSource/moddable/issues/441
https://github.com/Moddable-OpenSource/moddable/releases/tag/OS200908